home

buff.ac

Domain Information

Server location:
Istanbul, Turkey (TR)

ASN:
AS42910 SADECEHOSTING-COM Sadecehosting-Com, TR

The domain buff.ac has been seen to resolve to the following 2 IP addresses.

188.132.149.106
static-106-149-132-188.sadecehosting.net
April 16, 2016

185.70.84.44
July 16, 2015

File downloads found at URLs served by buff.ac.

0 / 68
http://buff.ac/HoundsTRdownload  (hounds_online_tr_downloader.exe)

0 / 68
http://buff.ac/Hounds-S2-Download  (hounds_online_tr_downloader.exe)

11 / 68    (Malware)
http://buff.ac/Hounds-S2-Download  (hounds_online_tr_downloader.exe)

0 / 68
http://buff.ac/houndsartorrent  (hounds_setup_en.exe.torrent)

37 / 68    (Malware)
http://buff.ac/houndsentorrent  (ground.exe)

0 / 68
http://buff.ac/houndsentorrent  (hounds_setup_en.exe.torrent)

0 / 68
http://buff.ac/houndsdetorrent  (hounds_setup_de.exe.torrent)

39 / 68    (Infected)
http://buff.ac/Hounds-S2-Download  (hounds_online_tr_downloader.exe)

0 / 68
http://buff.ac/houndstrtorrent  (hounds_setup_tr.exe.torrent)

The following 3 files have been seen to comunicate with buff.ac in live environments.

TCP » 188.132.149.106:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 188.132.149.106:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 188.132.149.106:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.